4.3
CVE-2025-55274
- EPSS 0.01%
- Veröffentlicht 26.03.2026 12:47:40
- Zuletzt bearbeitet 26.03.2026 20:19:07
- Quelle psirt@hcl.com
- CVE-Watchlists
- Unerledigt
LoginHCL Aftermarket DPC is affected by Cross-Origin Resource Sharing vulnerability
HCL Aftermarket DPC is affected by Cross-Origin Resource Sharing vulnerability. CORS misconfigurations includes the exposure of sensitive user information to attackers, unauthorized access to APIs, and possible data manipulation or leakage. If an attacker to exploit CORS misconfiguration, they could steal sensitive data, perform actions on behalf of a legitimate user.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hcltech ≫ Aftermarket Cloud Version1.0.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.01% | 0.019 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 2.8 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
|
| psirt@hcl.com | 2.6 | 1.2 | 1.4 |
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N
|
CWE-942 Permissive Cross-domain Policy with Untrusted Domains
The product uses a cross-domain policy file that includes domains that should not be trusted.